US10925154B2 - Tamper detection - Google Patents
Tamper detection Download PDFInfo
- Publication number
- US10925154B2 US10925154B2 US16/263,261 US201916263261A US10925154B2 US 10925154 B2 US10925154 B2 US 10925154B2 US 201916263261 A US201916263261 A US 201916263261A US 10925154 B2 US10925154 B2 US 10925154B2
- Authority
- US
- United States
- Prior art keywords
- capacitive
- capacitive plate
- shield
- volume
- circuitry
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active, expires
Links
Images
Classifications
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K1/00—Printed circuits
- H05K1/02—Details
- H05K1/0275—Security details, e.g. tampering prevention or detection
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01D—MEASURING NOT SPECIALLY ADAPTED FOR A SPECIFIC VARIABLE; ARRANGEMENTS FOR MEASURING TWO OR MORE VARIABLES NOT COVERED IN A SINGLE OTHER SUBCLASS; TARIFF METERING APPARATUS; MEASURING OR TESTING NOT OTHERWISE PROVIDED FOR
- G01D5/00—Mechanical means for transferring the output of a sensing member; Means for converting the output of a sensing member to another variable where the form or nature of the sensing member does not constrain the means for converting; Transducers not specially adapted for a specific variable
- G01D5/12—Mechanical means for transferring the output of a sensing member; Means for converting the output of a sensing member to another variable where the form or nature of the sensing member does not constrain the means for converting; Transducers not specially adapted for a specific variable using electric or magnetic means
- G01D5/14—Mechanical means for transferring the output of a sensing member; Means for converting the output of a sensing member to another variable where the form or nature of the sensing member does not constrain the means for converting; Transducers not specially adapted for a specific variable using electric or magnetic means influencing the magnitude of a current or voltage
- G01D5/24—Mechanical means for transferring the output of a sensing member; Means for converting the output of a sensing member to another variable where the form or nature of the sensing member does not constrain the means for converting; Transducers not specially adapted for a specific variable using electric or magnetic means influencing the magnitude of a current or voltage by varying capacitance
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01R—MEASURING ELECTRIC VARIABLES; MEASURING MAGNETIC VARIABLES
- G01R27/00—Arrangements for measuring resistance, reactance, impedance, or electric characteristics derived therefrom
- G01R27/02—Measuring real or complex resistance, reactance, impedance, or other two-pole characteristics derived therefrom, e.g. time constant
- G01R27/26—Measuring inductance or capacitance; Measuring quality factor, e.g. by using the resonance method; Measuring loss factor; Measuring dielectric constants ; Measuring impedance or related variables
- G01R27/2605—Measuring capacitance
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K1/00—Printed circuits
- H05K1/02—Details
- H05K1/0213—Electrical arrangements not otherwise provided for
- H05K1/0216—Reduction of cross-talk, noise or electromagnetic interference
- H05K1/023—Reduction of cross-talk, noise or electromagnetic interference using auxiliary mounted passive components or auxiliary substances
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K5/00—Casings, cabinets or drawers for electric apparatus
- H05K5/02—Details
- H05K5/0208—Interlock mechanisms; Means for avoiding unauthorised use or function, e.g. tamperproof
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K2201/00—Indexing scheme relating to printed circuits covered by H05K1/00
- H05K2201/09—Shape and layout
- H05K2201/09209—Shape and layout details of conductors
- H05K2201/095—Conductive through-holes or vias
- H05K2201/09618—Via fence, i.e. one-dimensional array of vias
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K2201/00—Indexing scheme relating to printed circuits covered by H05K1/00
- H05K2201/10—Details of components or other objects attached to or integrated in a printed circuit board
- H05K2201/10007—Types of components
- H05K2201/10037—Printed or non-printed battery
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K2201/00—Indexing scheme relating to printed circuits covered by H05K1/00
- H05K2201/10—Details of components or other objects attached to or integrated in a printed circuit board
- H05K2201/10007—Types of components
- H05K2201/10151—Sensor
-
- H—ELECTRICITY
- H05—ELECTRIC TECHNIQUES NOT OTHERWISE PROVIDED FOR
- H05K—PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS
- H05K2201/00—Indexing scheme relating to printed circuits covered by H05K1/00
- H05K2201/10—Details of components or other objects attached to or integrated in a printed circuit board
- H05K2201/10227—Other objects, e.g. metallic pieces
- H05K2201/10371—Shields or metal cases
Definitions
- This application relates generally to tamper-proofing of electronic systems, and more particularly to tamper-proof housings for sensitive electronic circuitry at the printed circuit board (PCB) level.
- PCB printed circuit board
- IP assets can include software and its related data, including as examples financial information, authentication keys, or firmware images; or hardware, such as sensitive chip-level or PCB designs, or other physical systems such as clock sources, digital sequence sources, or actuator control.
- Prior art tamper-proof system coverings include, for example, potting, electro-mechanical switches configured to break contact on tampering, PCB tamper mesh enclosures, or a switch or button using inductive sensing coils, Hall effect detection, or ambient light detection.
- an enclosure for circuitry includes a platform, a charge source, a first capacitive plate, a second capacitive plate, and a capacitive sensor.
- the circuitry is fixedly coupled to the platform.
- the first capacitive plate is also fixedly coupled to the platform, and either alone, or together with the platform, surrounds a volume containing the circuitry and the charge source, the charge source electrically coupled to and configured to charge the first capacitive plate.
- the second capacitive plate is fixedly coupled to the platform without touching the first capacitive plate, and either alone, or together with the platform, surrounds the first capacitive plate.
- the second capacitive plate is configured so that there is an electric potential difference between the first capacitive plate and the second capacitive plate.
- the capacitive sensor is electrically connected to the first capacitive plate and configured to determine when a capacitance between the first and second capacitive plates is changed.
- FIG. 1 shows an example of a side view of an electrical block diagram view of a system 100 including a secure enclosure for tamper detection using capacitive sensing.
- FIG. 2 shows an example plan and schematic view of the system of FIG. 1 .
- FIG. 4 shows an example of a process for tamper detection using capacitive sensing.
- FIG. 3A shows a three-quarters perspective view of an example implementation of a system including a secure enclosure (visible in FIG. 3C ) for tamper detection using capacitive sensing.
- FIG. 3B shows a three-quarters perspective view of the example system implementation of FIG. 3A .
- FIG. 3C shows a three-quarters perspective view 308 of the example system implementation of FIG. 3A .
- FIG. 1 shows an example of a side view of an electrical block diagram view of a system 100 including a secure enclosure 102 for tamper detection using capacitive sensing, where by way of introduction secure enclosure 102 includes a conductive structural inner volume ( 120 , 122 , 126 , 128 ) and a conductive structural outer volume ( 130 , 132 , 136 ).
- the conductive structural outer volume surrounds the conductive structural inner volume, thereby presenting capacitance between the inner and outer volumes.
- the control unit 104 includes a capacitive sensor 105 and logic for determining whether tampering has occurred based on capacitance measurements of the sensor.
- Capacitive sensor refers to a sensor which senses capacitance. Changes in capacitance are preferably measured as relative changes in capacitance. In some embodiments, changes in capacitance can be measured as absolute changes in capacitance.
- Changes in capacitance between the conductive structural inner volume and the conductive structural outer volume (e.g., changes greater than a threshold) indicate tampering.
- the PCB 112 has a top layer 140 , a middle layer 142 , and a bottom layer, 144 .
- the top layer 140 has a top surface 110 .
- the middle layer 142 has a middle-top surface 116 at an interface between the top layer 140 and the middle layer 142 , and a middle-bottom surface 124 at an interface between the middle layer 142 and the bottom layer 144 .
- the bottom layer has a bottom surface 134 .
- the “inside” of the secure enclosure 102 refers herein to the interior of the above-introduced inner volume, which is between (enclosed by) an inner top shield 120 , such as a hollow rectangular parallelepiped open along one larger face and mounted on the top surface 110 , and an inner bottom shield 126 , such as a conductive plate located on the middle-bottom surface 124 (between the middle layer 142 and bottom layer 144 of the PCB 112 ).
- an inner top shield 120 such as a hollow rectangular parallelepiped open along one larger face and mounted on the top surface 110
- an inner bottom shield 126 such as a conductive plate located on the middle-bottom surface 124 (between the middle layer 142 and bottom layer 144 of the PCB 112 ).
- the “outside” of the secure enclosure 102 refers herein to a volume external to the above-introduced outer volume, which is beyond an outer top shield 130 , such as a hollow rectangular parallelepiped open along one larger face but larger than inner top shield 120 and mounted on the top surface 110 , and an outer bottom shield 136 , such as a conductive plate mounted on the bottom surface 134 .
- the inner top shield 120 , inner bottom shield 126 , outer top shield 130 , and outer bottom shield 136 are further described below.
- the connection 114 preferably runs along the middle-top surface 116 , thereby embedding a length of the connection 114 within the PCB 112 to make tampering with the connection 114 more difficult, and connects to the control unit
- electrical activity within the secure enclosure 102 can affect sensed capacitance. This can be mitigated by, for example, PCB design, such as routing (direction and size of connections); bandwidth (or associated data rate) of signals; and timing and/or forced synchronicity capacitance measurements (for example, the system could force local electrical activity to stop when capacitance measurements are taken).
- PCB design such as routing (direction and size of connections); bandwidth (or associated data rate) of signals; and timing and/or forced synchronicity capacitance measurements (for example, the system could force local electrical activity to stop when capacitance measurements are taken).
- the control unit 104 is preferably connected by electrical lines 118 to the battery 106 and the secure asset 108 to mediate input and output (I/O) between the secure asset 106 and the outside of the secure enclosure 102 , preventing I/O if tampering is detected.
- the control unit 104 is electrically connected through an electrical connection 119 to the inner top shield 120 .
- the inner top shield 120 surrounds the inside of the secure enclosure 102 without gaps in the inner top shield 120 or between the inner top shield 120 and the PCB 112 .
- the inner top shield 120 is made of material appropriate as a capacitive plate (e.g., conductor), preferably selected to act as electromagnetic (EM) shielding, both with respect to photons (that is, the capacitive material is opaque), and with respect to electric and magnetic fields.
- the inner top shield 120 is mounted on the top surface 110 of the PCB 112 and is electrically connected to the control unit 104 and the battery 106 , and to one or more capacitive sense vias 122 .
- Capacitive sense vias are conductive, and electrically couple the control unit 104 (and its integrated capacitive sensor 105 ) to the top and bottom inner shields 120 , 130 .
- One such via 122 is shown in FIG. 1 , but as shown in FIG. 2 , multiple adjacent capacitive sense vias 122 are preferably implemented.
- the battery 106 is connected to the inner top shield 120 via the control unit 104 (using the electrical connection 119 ), so that the control unit 104 can regulate the charge on the inner top shield 120 and the inner bottom shield 126 . That is, the battery 106 is connected to power the control unit 104 , and the control unit 104 applies charge to the inner top shield 120 , the capacitive sense vias 122 , and the inner bottom shield 130 .
- the capacitive sense vias 122 interpenetrate the PCB 112 from the top surface 110 to the middle-bottom surface 124 .
- the capacitive sense vias 122 are electrically connected to the inner bottom shield 126 .
- the inner bottom shield 126 is mounted on the bottom surface 124 of the PCB 112 , covers an area of the middle-bottom surface 124 matching and aligned (e.g., vertically) with an area of the top surface 110 covered by the inner top shield 120 , and is made of a conductive material selected to act as a capacitive plate and as EM shielding.
- a return line 128 electrically connects the inner bottom shield 126 to a channel of the control unit 104 . As further described below, e.g., with respect to FIG.
- capacitive sense vias 122 there are preferably multiple capacitive sense vias 122 , located within a perimeter of the top and bottom inner shields 120 , 130 (viewing the system 100 looking towards and perpendicularly to the top surface 110 , as in FIG. 2 ).
- the preferred arrangement of the vias 122 , 132 can also be described as staggered placement of the capacitive sense vias 122 and ground vias 132 , or analogized to an alternating crenellation (with ground vias 132 in the upper portions of crenellation notches, and capacitive sense vias 122 in lower portions of crenellation notches, or vice versa).
- the inner top shield 120 capacitive sense vias 122 , and inner bottom shield 126 (together referred to herein as the inner shield) together surround and enclose the secure enclosure 102 .
- the outer top shield 130 is mounted on the PCB 112 so that the outer top shield 130 surrounds and is near to, but not in electrical contact with, the inner top shield 120 . That is, the inner top shield 120 is nested within the outer top shield 130 . There are preferably no gaps in the outer top shield 130 , or between the outer top shield 130 and the PCB 112 , to prevent exterior access to the inside of the secure enclosure 102 .
- the outer top shield 130 like the inner top shield 120 , is made of a conductive material, preferably selected to act as a capacitive plate and as EM shielding.
- the inner and outer top shields 120 , 130 can be mounted on the PCB using, for example, solder or mounting brackets which create a reliable electrical connection between the shields and power or ground (respectively).
- the outer top shield 130 is connected to multiple ground vias 132 , which are connected to a ground (not shown) located outside of the secure enclosure 102 .
- the ground vias 132 interpenetrate the PCB 112 from the top surface 110 to the bottom surface 134 .
- the ground vias 132 are electrically connected to the outer bottom shield 136 .
- the outer bottom shield 136 is mounted on the bottom surface 134 of the PCB, covers an area of the bottom surface 134 matching and aligned (e.g., vertically) with an area of the top surface 110 covered by the outer top shield 130 , and is made of a material selected to act as a capacitive plate and as EM shielding.
- the ground vias 132 are preferably disposed in a ring (i.e., surrounding alignment, but not necessarily circular) near the perimeter of the outer bottom shield 136 .
- the capacitive sense vias 122 and the ground vias 132 are preferably “blind” vias, that is, they are preferably not externally visible or physically accessible when the secure enclosure 102 is fully assembled (for example, a portion of the capacitive sense vias 122 connected to the middle-bottom surface 124 is covered by the inner bottom shield 126 , and a portion of the ground vias 132 connected to the bottom surface 134 is covered by the outer bottom shield 136 ).
- the outer top shield 130 , the ground vias 132 , and the outer bottom shield 136 together surround and enclose the secure enclosure 102 , the inner top shield 120 , the capacitive sense vias 122 , and the inner bottom shield 130 .
- secure asset 108 devices are placed only on a side of the PCB 112 enclosed by the inner and outer top shields 120 , 130 .
- volumes which can fit secure assets 108 can be located on more than one side of the PCB 112 , such as on both sides of a planar PCB 112 .
- sensitive power planes and signal traces reside within the secure enclosure 102 .
- the inner top shield 120 and the outer top shield 130 act as a top plate capacitor, driven by the control unit 104 (powered by the battery 106 ) using the capacitive sense vias 122 , and grounded by the ground vias 132 .
- the inner bottom shield 126 and the outer bottom shield 136 act as a bottom plate capacitor, driven by the battery 106 using the capacitive sense vias 122 , and grounded by the ground vias 132 .
- EM field lines run between the inner top shield 120 and the outer top shield 130 , and between the inner bottom shield 126 and the outer bottom shield 136 .
- the control unit 104 preferably controls the inner top shield 120 , capacitive sense vias 122 , and inner bottom shield 130 to charge and (partially) discharge at a high frequency, for example, 1 MHz.
- the control unit 114 is configured to measure changes in capacitance of the top and bottom plate capacitors.
- An empty volume 138 between the inner and outer top shields 120 , 130 or inner and outer bottom shields 126 , 136 (PCB material, rather than an empty volume, is located between the bottom shields 126 , 136 in the example shown in FIG. 1 ) can be filled using a dielectric material comprising air or another dielectric material, such as a dielectric material with increased capacitance and/or reduced production handling requirements and/or cost.
- FIG. 2 shows an example plan and schematic view 200 of the system 100 of FIG. 1 .
- the outer perimeter of inner top shield 120 encloses each of the control unit 104 , the battery 106 , and the secure asset 108 .
- the plural capacitive sense vias 122 form a generally inner perimeter which, from FIG. 1 , is understood as into the page from the perspective of FIG. 2 , and that is located within the outer boundary (perimeter) of inner top shield 120 and within the outer boundary (perimeter) of outer top shield 130 .
- the plural ground vias 132 form a generally outer perimeter which, also from FIG. 1 , is understood as into the page from the perspective of FIG. 2 , and that is located outside the outer boundary (perimeter) of outer top shield 130 and/or overlapping the outer boundary (perimeter) of outer top shield 130 .
- the control unit 104 can detect changes in capacitance as between shields 120 , 126 , 130 , 136 , for instance were such a change to occur based on an attempt to tamper with the system 100 .
- Changes in capacitance measured by the control unit 104 can occur as a result of, for example, one of the shields 120 , 126 , 130 , 136 being moved, removed, distorted, or deflected (changing distances between plates), drilled through or ablated (changing the size, and therefore total conductor area, of a plate; and/or shorting the inner and outer plates if a drill bit is conductive), or charged by an exterior source (changing the charge on a plate).
- Changes in capacitance measured by the control unit 104 can also occur as a result of, for example, a drill bit (or other device for removing material) being used to access the inside of the secure enclosure 102 and drilling through or contacting a ground via 132 or a capacitive sense via 122 on the way; or an electrically conductive probe contacting one (or more) of the shields 120 , 126 , 130 , 136 or the vias 122 , 132 .
- a drill bit or other device for removing material
- the capacitive sense vias 122 and the ground vias 132 are preferably arranged in closely spaced concentric geometries around a perimeter of the secure enclosure 102 , with inner ring vias (capacitive sense vias 122 ) having alternating positions (staggered) with outer ring vias (ground vias 132 ), for example to prevent the PCB 112 from being drilled through by an attacker seeking access to the secure enclosure.
- inner ring vias capacitor sense vias 122
- ground vias 132 ground vias 132
- connection 114 is routed between the capacitive sense vias 122 and the ground vias 132 without a break in the via rings.
- the perimeter of the capacitive sense vias 122 is preferably within the perimeter of the top and bottom inner shields 120 , 130
- the perimeter of the ground vias 132 is preferably within or overlaps the perimeter of the top and bottom outer shields 126 , 136 .
- the shields 120 , 126 , 130 , 136 and the vias 122 , 132 thus provide a physical barrier against attacks attempting to physically access the secure enclosure, while allowing sufficient spacing to be arranged in or on the surface of the PCB 112 to pass power and/or signaling traces from the outside to the inside of the secure enclosure 102 .
- the outer shield is electrically connected and surrounds the secure enclosure 102 in three dimensions, forming a Faraday cage around the secure enclosure 102 . That is, the outer shield will generally block EM fields originating outside the secure enclosure 102 from penetrating to affect the inside of the secure enclosure 102 (isolating the secure enclosure 102 from external galvanic and photonic signals). This means that the outer shield being connected to the system ground shields the secure enclosure 102 from EM-based attacks (such as electrical overvoltage stress), and from unintended EM interference (reducing noise within the secure enclosure 102 ).
- control unit 104 makes the control unit 104 less sensitive to false tamper detection events, such as during system assembly or other intended end-user handling, because the outer shield being connected to system ground means that in ordinary handling, changes in capacitance in the top and bottom plate capacitors will generally be caused only by removal of the top or outer bottom shield 126 , 136 .
- control unit 104 when the control unit 104 detects tampering (a change in capacitance in the top and/or bottom plate capacitors), it can cause the secure asset 108 to be disabled.
- the secure asset 108 can be caused to delete sensitive data, make sensitive data unchangeable, or trigger a physically self-destructive event (for example, burning an entire array of programmable fuses to make data previously stored in a select portion of the fuses unreadable).
- FIG. 3A shows a three-quarters perspective view 300 of an example implementation of a system 100 as shown in and described with respect to FIG. 1A .
- FIG. 3A shows the system 100 with the inner top shield 120 (not visible) and the outer top shield 130 covering the secure enclosure 102 .
- Outer brackets 302 (partially visible) hold the outer top shield 130 in place against the PCB 112 .
- the ground vias 132 are visible outside the perimeter of the outer top shield 130 .
- FIG. 3B shows a three-quarters perspective view 304 of the example system 100 implementation of FIG. 3A .
- the outer top shield 130 is exploded away from the surface of the PCB 112 to reveal the inner top shield 120 .
- Inner brackets 306 hold the inner top shield 120 in place against the PCB 112 .
- FIG. 3C shows a three-quarters perspective view 308 of the example system 300 implementation of FIG. 3A .
- the outer top shield 130 and the inner top shield 120 are exploded away from the surface of the PCB 112 to reveal the secure enclosure 102 .
- the capacitive sense vias 122 are visible within the perimeter of the inner top shield 120 . (For clarity and simplicity, the inner and outer top shields 120 , 130 are spaced relatively far apart in FIGS. 3A, 3B, and 3C .
- the capacitive sense vias 122 and ground vias 132 are preferably closer together than shown—for example, close enough to deter and/or prevent physical attack by drilling into the secure enclosure 102 , as described above.)
- the control unit 104 , the battery 106 , and the secure asset 108 are also visible within the space comprising the secure enclosure 102 when the outer and inner top shields 120 , 130 are fixedly attached to the PCB 112 .
- FIG. 4 shows an example of a process 400 for tamper detection using capacitive sensing.
- a volume containing a secure asset for example, circuitry
- the inner shield including a charged inner capacitive plate coupled to a charge source within the volume, and capacitive sense vias coupling the inner capacitive plate to a capacitive sensor 105 located within the volume.
- the volume and the inner shield are enclosed within an outer shield, the outer shield including a grounded outer capacitive plate, and ground vias coupling the outer capacitive plate to a ground, the outer shield not touching the inner shield.
- a capacitance between the inner capacitive plate and the outer capacitive plate is measured using the capacitive sensor 105 .
- the circuitry is operated in dependence on the measuring—for example, if a measured change in capacitance is detected, then tampering is thusly presumed as the cause and a portion of the secure asset is caused to become inoperable.
- a reporting element can be triggered when tampering is detected. For example, an alarm can be activated, information about the detected change in capacitance can be stored in storage within the secure enclosure, or a signal indicating the detected tampering can be sent to the outside of the secure enclosure.
- power requirements of the control unit and secure asset are small.
- a small battery such as a coin cell battery, can be used.
- only one of the inner top and outer shields comprises electromagnetic shielding. In some embodiments, only one of the bottom inner and outer shields comprises electromagnetic shielding.
- I/O between the secure enclosure and the exterior is routed through the control unit.
- the control unit is not connected to communicate with the secure asset. In some embodiments, the control unit is not electrically connected to the secure asset.
- an MSP430FR2633 or other MSP430 CapTIvate enabled device comprises or is used in a control unit. These devices are commercially available from Texas Instruments.
- the secure enclosure can contain, for example, one or more of: a processor, a memory, or a communications device.
- more than two via rings are used. In some embodiments, vias are arranged other than in a ring.
- tamper sensors in addition to the control unit are used, such as photon or pressure sensors.
- the battery is selected to be large enough to last for a projected lifetime of the secure asset. In some embodiments, the battery's lifetime defines the useful lifetime of the secure asset.
- power is supplied by wires extending from the outside to the inside of the secure enclosure. That is, the charge source for charging the top and bottom inner shields can be powered by a power source 146 outside the secure enclosure, and connected to the control unit by, for example, the connection.
- capacitive sensing and data protection (such as a hardware-level security key) can be implemented on the same device.
- one or more of the outer top shield, the inner top shield, the outer bottom shield, and the inner bottom shield is detachable. In some embodiments, one or more of the outer top shield, the inner top shield, the outer bottom shield, and the inner bottom shield, is not detachable (for example, is soldered onto the PCB or is connected to the PCB using an adhesive).
- voltage, temperature, and humidity monitoring subsystems can be included in a tamper detection system, insider or outside of the secure enclosure, to assist in detecting physical tamper attacks, and/or to provide measurements which can be analyzed to compensate for environmental factors which can affect capacitance measurements.
- these subsystems are located inside the secure enclosure for use in conjunction with the capacitance measurement system.
- these subsystems are integrated into the control unit (for example, integrated into an integrated circuit which includes capacitance measurement circuits).
- the timing of capacitance measurements, and/or the timing of activating voltage, temperature, and humidity monitoring subsystems subsystems can be controlled to appear non-deterministic to an attacker, for example, using random or pseudorandom timing for measurement polling events.
- devices within the secure enclosure are powered only by a battery or other energy storage fully contained within the secure enclosure. In some embodiments, devices within the secure enclosure can receive power from outside the secure enclosure.
- the secure asset and/or the control unit is programmable from outside of the secure enclosure.
- the secure asset can be reprogrammed by the control unit.
- the control unit can be reprogrammed by the secure asset.
- an inner shield and an outer shield fully surround the PCB (or other platform on which the secure asset is mounted). In some such embodiments, there is only one inner shield and only one outer shield. In some such embodiments, the shields alone (without the PCB) are sufficient to surround and enclose the secure enclosure.
- control unit changes the operation of the secure asset (for example, causing reprogramming or destruction of portions or all of the secure asset) if a change in capacitance between the inner and outer plate capacitors is greater than a threshold.
- the threshold is dependent on a state of charging the inner plate capacitor or on environmental factors (such as sensed voltage, temperature, and humidity).
- the charge source for the inner capacitive plate is other than a battery.
- the inner top shield and the outer top shield are shaped as five-sided boxes, as N-sided polyhedra with N ⁇ 1 closed sides, or as continuous portions of a sphere.
- the electrical connection between the inside and outside of the secure enclosure can be configured to provide into the secure enclosure (from a communications node 148 outside of the secure enclosure to which the electrical connection is connected) one or more of power, control signals for the circuitry and/or the capacitive sensor, or data for use in operation of the circuitry and/or the capacitive sensor.
- ground vias and/or capacitive sense vias are larger or smaller. In some embodiments, more or fewer ground vias and/or capacitive sense vias are used.
- polyhedral shapes made of conductive material including polyhedral shapes other than rectangular parallelepipeds, which open on one or more faces and configured to fixedly or removeably attach to the PCB without a gap in the shape or between the shape and the PCB, can be used as shields (capacitive plates).
- inner and outer bottom shields are mounted on the bottom surface and enclose an empty volume, similarly to the inner and outer top shields.
- circuitry is located within the empty volume enclosed by the inner and outer bottom shields.
- control unit uses different (or randomized) frequencies to charge and discharge the inner shield (the top and bottom inner plate and the capacitive sense vias).
- the outer shield is electrically coupled to a ground, but is not at a voltage of the ground.
- the outer shield can be electrically coupled to a ground via a resistor and/or one or more other impedance elements.
- the outer shield is configured so that there is an electric potential difference between the outer shield and the inner shield (for example, other than a potential difference corresponding to a charged inner shield and a grounded outer shield).
- a conductive structural inner volume does not include capacitive sense vias and/or an inner bottom plate.
- a conductive structural outer volume does not include ground vias and/or an outer bottom plate.
- different capacitive sensors measure capacitance with respect to inner and outer top plates than with respect to inner and outer bottom plates and/or with respect to ground vias and capacitive sense vias.
- the outer shield(s) can be coated and/or covered with a non-conductive material. In some embodiments, exposed portions of vias can be coated and/or covered with a non-conductive material.
- the secure enclosure is hermetically sealed.
- the secure enclosure and/or the empty volume is wholly or partially filled with a non-conductive material, such as a potting material (encapsulation material).
- a non-conductive material such as a potting material (encapsulation material).
- a key can be transmitted into the control unit from outside the secure enclosure which disables at least part of the control unit functionality; for example, to allow for intended access to the interior of the secure enclosure.
- capacitive sense vias can be located outside the perimeter of the inner top and/or bottom shields and within the perimeter of the outer top and/or bottom shields. In some embodiments, capacitive sense vias can be located to overlap the perimeter of the inner inner top and/or bottom shields. In some embodiments, ground vias can be located inside the perimeter of the outer top and/or bottom shields and within the perimeter of the inner top and/or bottom shields.
- no return line is used.
- the battery and the control unit are coupled to the ground via the capacitive coupling between the inner and outer shields.
- the inner top plate is driven (charged) separately from the inner bottom plate and/or the capacitive sense vias. That is, the inner top plate, the inner bottom plate, and the capacitive sense vias can be driven using separate channels from the capacitive sensor (or otherwise directly or indirectly from the battery or other charge source). Power can also be distributed on the same or additional separate channel(s) to other devices within the secure enclosure.
- connection uses a medium other than electricity through a wire to transmit signals, e.g., photonic or galvanic signal transmission.
- the capacitive sense vias are capacitively coupled to the ground vias.
Abstract
In described examples, an enclosure for circuitry includes a platform, a charge source, a first capacitive plate, a second capacitive plate, and a capacitive sensor. The circuitry is fixedly coupled to the platform. The first capacitive plate is also fixedly coupled to the platform, and either alone, or together with the platform, surrounds a volume containing the circuitry and the charge source, the charge source electrically coupled to and configured to charge the first capacitive plate. The second capacitive plate is fixedly coupled to the platform without touching the first capacitive plate, and either alone, or together with the platform, surrounds the first capacitive plate. The second capacitive plate is configured so that there is an electric potential difference between the first capacitive plate and the second capacitive plate. The capacitive sensor is electrically connected to the first capacitive plate and configured to determine when a capacitance between the first and second capacitive plates is changed.
Description
This application relates generally to tamper-proofing of electronic systems, and more particularly to tamper-proof housings for sensitive electronic circuitry at the printed circuit board (PCB) level.
Many forms of electronic security are made vulnerable to penetration if an adverse party has physical access to the system. Reverse engineering, decapsulation, hardware-based man-in-the-middle attacks, and other methods can enable an attacker with physical access to system busses and connected integrated circuits (ICs) to circumvent system-level and/or device-level security. Physical attack tampering typically takes place in order for certain intellectual property (IP) assets to be uncovered, stolen, altered, manipulated, destroyed, or otherwise compromised. Such IP assets can include software and its related data, including as examples financial information, authentication keys, or firmware images; or hardware, such as sensitive chip-level or PCB designs, or other physical systems such as clock sources, digital sequence sources, or actuator control. Prior art tamper-proof system coverings include, for example, potting, electro-mechanical switches configured to break contact on tampering, PCB tamper mesh enclosures, or a switch or button using inductive sensing coils, Hall effect detection, or ambient light detection.
In described examples, an enclosure for circuitry includes a platform, a charge source, a first capacitive plate, a second capacitive plate, and a capacitive sensor. The circuitry is fixedly coupled to the platform. The first capacitive plate is also fixedly coupled to the platform, and either alone, or together with the platform, surrounds a volume containing the circuitry and the charge source, the charge source electrically coupled to and configured to charge the first capacitive plate. The second capacitive plate is fixedly coupled to the platform without touching the first capacitive plate, and either alone, or together with the platform, surrounds the first capacitive plate. The second capacitive plate is configured so that there is an electric potential difference between the first capacitive plate and the second capacitive plate. The capacitive sensor is electrically connected to the first capacitive plate and configured to determine when a capacitance between the first and second capacitive plates is changed.
The PCB 112 has a top layer 140, a middle layer 142, and a bottom layer, 144. The top layer 140 has a top surface 110. The middle layer 142 has a middle-top surface 116 at an interface between the top layer 140 and the middle layer 142, and a middle-bottom surface 124 at an interface between the middle layer 142 and the bottom layer 144. The bottom layer has a bottom surface 134.
The “inside” of the secure enclosure 102 refers herein to the interior of the above-introduced inner volume, which is between (enclosed by) an inner top shield 120, such as a hollow rectangular parallelepiped open along one larger face and mounted on the top surface 110, and an inner bottom shield 126, such as a conductive plate located on the middle-bottom surface 124 (between the middle layer 142 and bottom layer 144 of the PCB 112). The “outside” of the secure enclosure 102 refers herein to a volume external to the above-introduced outer volume, which is beyond an outer top shield 130, such as a hollow rectangular parallelepiped open along one larger face but larger than inner top shield 120 and mounted on the top surface 110, and an outer bottom shield 136, such as a conductive plate mounted on the bottom surface 134. The inner top shield 120, inner bottom shield 126, outer top shield 130, and outer bottom shield 136 are further described below. There is preferably a single electrical connection 114 connecting circuitry inside the secure enclosure to circuitry outside the secure enclosure 102, to avoid providing routes—physical openings in the conductive structural volumes—by which an attacker might attempt to gain physical access to the inside of the secure enclosure. The connection 114 preferably runs along the middle-top surface 116, thereby embedding a length of the connection 114 within the PCB 112 to make tampering with the connection 114 more difficult, and connects to the control unit 104.
In some embodiments, electrical activity within the secure enclosure 102, or between the inside and outside of the secure enclosure 102, can affect sensed capacitance. This can be mitigated by, for example, PCB design, such as routing (direction and size of connections); bandwidth (or associated data rate) of signals; and timing and/or forced synchronicity capacitance measurements (for example, the system could force local electrical activity to stop when capacitance measurements are taken).
The control unit 104 is preferably connected by electrical lines 118 to the battery 106 and the secure asset 108 to mediate input and output (I/O) between the secure asset 106 and the outside of the secure enclosure 102, preventing I/O if tampering is detected. The control unit 104 is electrically connected through an electrical connection 119 to the inner top shield 120. The inner top shield 120 surrounds the inside of the secure enclosure 102 without gaps in the inner top shield 120 or between the inner top shield 120 and the PCB 112. The inner top shield 120 is made of material appropriate as a capacitive plate (e.g., conductor), preferably selected to act as electromagnetic (EM) shielding, both with respect to photons (that is, the capacitive material is opaque), and with respect to electric and magnetic fields. The inner top shield 120 is mounted on the top surface 110 of the PCB 112 and is electrically connected to the control unit 104 and the battery 106, and to one or more capacitive sense vias 122. Capacitive sense vias are conductive, and electrically couple the control unit 104 (and its integrated capacitive sensor 105) to the top and bottom inner shields 120, 130. One such via 122 is shown in FIG. 1 , but as shown in FIG. 2 , multiple adjacent capacitive sense vias 122 are preferably implemented.
In the example shown in FIG. 1 , the battery 106 is connected to the inner top shield 120 via the control unit 104 (using the electrical connection 119), so that the control unit 104 can regulate the charge on the inner top shield 120 and the inner bottom shield 126. That is, the battery 106 is connected to power the control unit 104, and the control unit 104 applies charge to the inner top shield 120, the capacitive sense vias 122, and the inner bottom shield 130.
The capacitive sense vias 122 interpenetrate the PCB 112 from the top surface 110 to the middle-bottom surface 124. The capacitive sense vias 122 are electrically connected to the inner bottom shield 126. The inner bottom shield 126 is mounted on the bottom surface 124 of the PCB 112, covers an area of the middle-bottom surface 124 matching and aligned (e.g., vertically) with an area of the top surface 110 covered by the inner top shield 120, and is made of a conductive material selected to act as a capacitive plate and as EM shielding. A return line 128 electrically connects the inner bottom shield 126 to a channel of the control unit 104. As further described below, e.g., with respect to FIG. 2 , there are preferably multiple capacitive sense vias 122, located within a perimeter of the top and bottom inner shields 120, 130 (viewing the system 100 looking towards and perpendicularly to the top surface 110, as in FIG. 2 ). The preferred arrangement of the vias 122, 132 can also be described as staggered placement of the capacitive sense vias 122 and ground vias 132, or analogized to an alternating crenellation (with ground vias 132 in the upper portions of crenellation notches, and capacitive sense vias 122 in lower portions of crenellation notches, or vice versa). From the preceding, therefore, one skilled in the art should now appreciate, as introduced earlier, that the inner top shield 120, capacitive sense vias 122, and inner bottom shield 126 (together referred to herein as the inner shield) together surround and enclose the secure enclosure 102.
The outer top shield 130 is mounted on the PCB 112 so that the outer top shield 130 surrounds and is near to, but not in electrical contact with, the inner top shield 120. That is, the inner top shield 120 is nested within the outer top shield 130. There are preferably no gaps in the outer top shield 130, or between the outer top shield 130 and the PCB 112, to prevent exterior access to the inside of the secure enclosure 102. The outer top shield 130, like the inner top shield 120, is made of a conductive material, preferably selected to act as a capacitive plate and as EM shielding. The inner and outer top shields 120, 130 can be mounted on the PCB using, for example, solder or mounting brackets which create a reliable electrical connection between the shields and power or ground (respectively).
The outer top shield 130 is connected to multiple ground vias 132, which are connected to a ground (not shown) located outside of the secure enclosure 102. The ground vias 132 interpenetrate the PCB 112 from the top surface 110 to the bottom surface 134. The ground vias 132 are electrically connected to the outer bottom shield 136. The outer bottom shield 136 is mounted on the bottom surface 134 of the PCB, covers an area of the bottom surface 134 matching and aligned (e.g., vertically) with an area of the top surface 110 covered by the outer top shield 130, and is made of a material selected to act as a capacitive plate and as EM shielding. The ground vias 132 are preferably disposed in a ring (i.e., surrounding alignment, but not necessarily circular) near the perimeter of the outer bottom shield 136. The capacitive sense vias 122 and the ground vias 132 are preferably “blind” vias, that is, they are preferably not externally visible or physically accessible when the secure enclosure 102 is fully assembled (for example, a portion of the capacitive sense vias 122 connected to the middle-bottom surface 124 is covered by the inner bottom shield 126, and a portion of the ground vias 132 connected to the bottom surface 134 is covered by the outer bottom shield 136). The outer top shield 130, the ground vias 132, and the outer bottom shield 136 together surround and enclose the secure enclosure 102, the inner top shield 120, the capacitive sense vias 122, and the inner bottom shield 130.
Preferably, secure asset 108 devices are placed only on a side of the PCB 112 enclosed by the inner and outer top shields 120, 130. (In some embodiments, volumes which can fit secure assets 108 can be located on more than one side of the PCB 112, such as on both sides of a planar PCB 112.) Also, preferably, sensitive power planes and signal traces reside within the secure enclosure 102.
The inner top shield 120 and the outer top shield 130 act as a top plate capacitor, driven by the control unit 104 (powered by the battery 106) using the capacitive sense vias 122, and grounded by the ground vias 132. Similarly, the inner bottom shield 126 and the outer bottom shield 136 act as a bottom plate capacitor, driven by the battery 106 using the capacitive sense vias 122, and grounded by the ground vias 132. EM field lines run between the inner top shield 120 and the outer top shield 130, and between the inner bottom shield 126 and the outer bottom shield 136. The control unit 104 preferably controls the inner top shield 120, capacitive sense vias 122, and inner bottom shield 130 to charge and (partially) discharge at a high frequency, for example, 1 MHz.
The control unit 114 is configured to measure changes in capacitance of the top and bottom plate capacitors. An empty volume 138 between the inner and outer top shields 120, 130 or inner and outer bottom shields 126, 136 (PCB material, rather than an empty volume, is located between the bottom shields 126, 136 in the example shown in FIG. 1 ) can be filled using a dielectric material comprising air or another dielectric material, such as a dielectric material with increased capacitance and/or reduced production handling requirements and/or cost.
In operation and as further detailed below with respect to FIG. 4 , the control unit 104 can detect changes in capacitance as between shields 120, 126, 130, 136, for instance were such a change to occur based on an attempt to tamper with the system 100. Changes in capacitance measured by the control unit 104 can occur as a result of, for example, one of the shields 120, 126, 130, 136 being moved, removed, distorted, or deflected (changing distances between plates), drilled through or ablated (changing the size, and therefore total conductor area, of a plate; and/or shorting the inner and outer plates if a drill bit is conductive), or charged by an exterior source (changing the charge on a plate). Changes in capacitance measured by the control unit 104 can also occur as a result of, for example, a drill bit (or other device for removing material) being used to access the inside of the secure enclosure 102 and drilling through or contacting a ground via 132 or a capacitive sense via 122 on the way; or an electrically conductive probe contacting one (or more) of the shields 120, 126, 130, 136 or the vias 122, 132.
As shown in FIG. 2 , the capacitive sense vias 122 and the ground vias 132 are preferably arranged in closely spaced concentric geometries around a perimeter of the secure enclosure 102, with inner ring vias (capacitive sense vias 122) having alternating positions (staggered) with outer ring vias (ground vias 132), for example to prevent the PCB 112 from being drilled through by an attacker seeking access to the secure enclosure. (A break in the via rings, through which the connection 114 passes, is shown for clarity and simplicity. In preferred embodiments, the connection 114 is routed between the capacitive sense vias 122 and the ground vias 132 without a break in the via rings.) Also, the perimeter of the capacitive sense vias 122 is preferably within the perimeter of the top and bottom inner shields 120, 130, and the perimeter of the ground vias 132 is preferably within or overlaps the perimeter of the top and bottom outer shields 126, 136. Together, the shields 120, 126, 130, 136 and the vias 122, 132 thus provide a physical barrier against attacks attempting to physically access the secure enclosure, while allowing sufficient spacing to be arranged in or on the surface of the PCB 112 to pass power and/or signaling traces from the outside to the inside of the secure enclosure 102.
The outer shield is electrically connected and surrounds the secure enclosure 102 in three dimensions, forming a Faraday cage around the secure enclosure 102. That is, the outer shield will generally block EM fields originating outside the secure enclosure 102 from penetrating to affect the inside of the secure enclosure 102 (isolating the secure enclosure 102 from external galvanic and photonic signals). This means that the outer shield being connected to the system ground shields the secure enclosure 102 from EM-based attacks (such as electrical overvoltage stress), and from unintended EM interference (reducing noise within the secure enclosure 102). This also makes the control unit 104 less sensitive to false tamper detection events, such as during system assembly or other intended end-user handling, because the outer shield being connected to system ground means that in ordinary handling, changes in capacitance in the top and bottom plate capacitors will generally be caused only by removal of the top or outer bottom shield 126, 136.
In some embodiments, when the control unit 104 detects tampering (a change in capacitance in the top and/or bottom plate capacitors), it can cause the secure asset 108 to be disabled. For example, the secure asset 108 can be caused to delete sensitive data, make sensitive data unchangeable, or trigger a physically self-destructive event (for example, burning an entire array of programmable fuses to make data previously stored in a select portion of the fuses unreadable).
As shown in FIGS. 3A, 3B, and 3C , when the outer and inner top shields 120, 130 are fixedly attached to the PCB 112 by the outer and inner brackets 302, 306, the conductive structural inner volume (120, 122, 126, 128) is capacitively coupled to the conductive structural outer volume (130, 132, 136). Accordingly, changes in the capacitance between the conductive structural inner volume (120, 122, 126, 128) and the conductive structural outer volume (130, 132, 136) (as measured by the capacitive sensor 105 in the control unit 104) indicate tampering—that is, attempts to physically or electrically access the inside of the secure enclosure 102.
Modifications are possible in the described embodiments, and other embodiments are possible, within the scope of the claims.
In some embodiments, there is more than one electrical connection between the inside and the outside of the secure enclosure.
In some embodiments, there is a direct electrical connection between the exterior of the secure enclosure and the secure asset.
In some embodiments, there is no electrical connection between the inside and the outside of the secure enclosure.
In some embodiments, power requirements of the control unit and secure asset are small. In some embodiments in which the secure enclosure is isolated from power sources outside of the secure enclosure, a small battery, such as a coin cell battery, can be used.
In some embodiments, only one of the inner top and outer shields comprises electromagnetic shielding. In some embodiments, only one of the bottom inner and outer shields comprises electromagnetic shielding.
In some embodiments, I/O between the secure enclosure and the exterior is routed through the control unit. In some embodiments, the control unit is not connected to communicate with the secure asset. In some embodiments, the control unit is not electrically connected to the secure asset.
In some embodiments, an MSP430FR2633 or other MSP430 CapTIvate enabled device comprises or is used in a control unit. These devices are commercially available from Texas Instruments.
In some embodiments, the secure enclosure can contain, for example, one or more of: a processor, a memory, or a communications device.
In some embodiments, more than two via rings are used. In some embodiments, vias are arranged other than in a ring.
In some embodiments, tamper sensors in addition to the control unit are used, such as photon or pressure sensors.
In some embodiments, the battery is selected to be large enough to last for a projected lifetime of the secure asset. In some embodiments, the battery's lifetime defines the useful lifetime of the secure asset. In some embodiments, power is supplied by wires extending from the outside to the inside of the secure enclosure. That is, the charge source for charging the top and bottom inner shields can be powered by a power source 146 outside the secure enclosure, and connected to the control unit by, for example, the connection.
In some embodiments, capacitive sensing and data protection (such as a hardware-level security key) can be implemented on the same device.
In some embodiments, one or more of the outer top shield, the inner top shield, the outer bottom shield, and the inner bottom shield, is detachable. In some embodiments, one or more of the outer top shield, the inner top shield, the outer bottom shield, and the inner bottom shield, is not detachable (for example, is soldered onto the PCB or is connected to the PCB using an adhesive).
In some embodiments, voltage, temperature, and humidity monitoring subsystems can be included in a tamper detection system, insider or outside of the secure enclosure, to assist in detecting physical tamper attacks, and/or to provide measurements which can be analyzed to compensate for environmental factors which can affect capacitance measurements. In some embodiments, these subsystems are located inside the secure enclosure for use in conjunction with the capacitance measurement system. In some embodiments, these subsystems are integrated into the control unit (for example, integrated into an integrated circuit which includes capacitance measurement circuits). In some embodiments, the timing of capacitance measurements, and/or the timing of activating voltage, temperature, and humidity monitoring subsystems subsystems, can be controlled to appear non-deterministic to an attacker, for example, using random or pseudorandom timing for measurement polling events.
In some embodiments, devices within the secure enclosure are powered only by a battery or other energy storage fully contained within the secure enclosure. In some embodiments, devices within the secure enclosure can receive power from outside the secure enclosure.
In some embodiments, the secure asset and/or the control unit is programmable from outside of the secure enclosure. In some embodiments, the secure asset can be reprogrammed by the control unit. In some embodiments, the control unit can be reprogrammed by the secure asset.
In some embodiments, an inner shield and an outer shield fully surround the PCB (or other platform on which the secure asset is mounted). In some such embodiments, there is only one inner shield and only one outer shield. In some such embodiments, the shields alone (without the PCB) are sufficient to surround and enclose the secure enclosure.
In some embodiments, the control unit changes the operation of the secure asset (for example, causing reprogramming or destruction of portions or all of the secure asset) if a change in capacitance between the inner and outer plate capacitors is greater than a threshold. In some embodiments, the threshold is dependent on a state of charging the inner plate capacitor or on environmental factors (such as sensed voltage, temperature, and humidity).
In some embodiments, the charge source for the inner capacitive plate is other than a battery.
In some embodiments, the inner top shield and the outer top shield are shaped as five-sided boxes, as N-sided polyhedra with N−1 closed sides, or as continuous portions of a sphere.
In some embodiments, the electrical connection between the inside and outside of the secure enclosure can be configured to provide into the secure enclosure (from a communications node 148 outside of the secure enclosure to which the electrical connection is connected) one or more of power, control signals for the circuitry and/or the capacitive sensor, or data for use in operation of the circuitry and/or the capacitive sensor.
In some embodiments, ground vias and/or capacitive sense vias are larger or smaller. In some embodiments, more or fewer ground vias and/or capacitive sense vias are used.
In some embodiments, polyhedral shapes made of conductive material, including polyhedral shapes other than rectangular parallelepipeds, which open on one or more faces and configured to fixedly or removeably attach to the PCB without a gap in the shape or between the shape and the PCB, can be used as shields (capacitive plates).
In some embodiments, inner and outer bottom shields are mounted on the bottom surface and enclose an empty volume, similarly to the inner and outer top shields. In some such embodiments, circuitry is located within the empty volume enclosed by the inner and outer bottom shields.
In some embodiments, there are gaps in one or more of the inner top shield, the outer top shield, the inner bottom shield, or the outer top shield, or between one or more of the shields and the PCB (or other platform on which devices in the secure enclosure are mounted), such that the gaps are too small for an attacker to use to gain access to the inside of the secure enclosure.
In some embodiments, the control unit uses different (or randomized) frequencies to charge and discharge the inner shield (the top and bottom inner plate and the capacitive sense vias).
In some embodiments, the outer shield is electrically coupled to a ground, but is not at a voltage of the ground. For example, the outer shield can be electrically coupled to a ground via a resistor and/or one or more other impedance elements. In some embodiments, the outer shield is configured so that there is an electric potential difference between the outer shield and the inner shield (for example, other than a potential difference corresponding to a charged inner shield and a grounded outer shield).
In some embodiments, a conductive structural inner volume does not include capacitive sense vias and/or an inner bottom plate. In some embodiments, a conductive structural outer volume does not include ground vias and/or an outer bottom plate. In some embodiments, different capacitive sensors measure capacitance with respect to inner and outer top plates than with respect to inner and outer bottom plates and/or with respect to ground vias and capacitive sense vias.
In some embodiments, the outer shield(s) can be coated and/or covered with a non-conductive material. In some embodiments, exposed portions of vias can be coated and/or covered with a non-conductive material.
In some embodiments, the secure enclosure is hermetically sealed.
In some embodiments, the secure enclosure and/or the empty volume is wholly or partially filled with a non-conductive material, such as a potting material (encapsulation material).
In some embodiments, a key can be transmitted into the control unit from outside the secure enclosure which disables at least part of the control unit functionality; for example, to allow for intended access to the interior of the secure enclosure.
In some embodiments, capacitive sense vias can be located outside the perimeter of the inner top and/or bottom shields and within the perimeter of the outer top and/or bottom shields. In some embodiments, capacitive sense vias can be located to overlap the perimeter of the inner inner top and/or bottom shields. In some embodiments, ground vias can be located inside the perimeter of the outer top and/or bottom shields and within the perimeter of the inner top and/or bottom shields.
In some embodiments, no return line is used. In some embodiments, the battery and the control unit are coupled to the ground via the capacitive coupling between the inner and outer shields.
In some embodiments, the inner top plate is driven (charged) separately from the inner bottom plate and/or the capacitive sense vias. That is, the inner top plate, the inner bottom plate, and the capacitive sense vias can be driven using separate channels from the capacitive sensor (or otherwise directly or indirectly from the battery or other charge source). Power can also be distributed on the same or additional separate channel(s) to other devices within the secure enclosure.
In some embodiments, the connection uses a medium other than electricity through a wire to transmit signals, e.g., photonic or galvanic signal transmission.
In some embodiments, the capacitive sense vias are capacitively coupled to the ground vias.
Claims (23)
1. An enclosure for circuitry, comprising:
a platform to which the circuitry is fixedly coupled;
a charge source;
a first capacitive plate fixedly coupled to the platform, and either alone, or together with the platform, surrounding a volume containing the circuitry and the charge source, the charge source electrically coupled to and configured to charge the first capacitive plate;
a second capacitive plate fixedly coupled to the platform without touching the first capacitive plate, and either alone, or together with the platform, surrounding the first capacitive plate, the second capacitive plate configured so that there is an electric potential difference between the first capacitive plate and the second capacitive plate; and
a capacitive sensor electrically connected to the first capacitive plate and configured to determine when a capacitance between the first and second capacitive plates is changed.
2. The enclosure of claim 1 , wherein the second capacitive plate is electrically coupled to a ground.
3. The enclosure of claim 1 ,
wherein the first capacitive plate includes a first top portion;
wherein the charge source, the circuitry, and the first top portion are fixedly coupled to a surface of the platform;
wherein the second capacitive plate includes a second top portion, the first top portion being nested within the second top portion;
wherein the first capacitive plate includes a first bottom portion fixedly coupled to a portion of the platform which is displaced in a direction orthogonal to, and towards an interior of the platform from, the surface; and
wherein the second capacitive plate includes a second bottom portion fixedly coupled to a portion of the platform which is displaced, more than the first bottom portion, in a direction orthogonal to, and towards an interior of the platform from, the surface;
further comprising multiple capacitive sense vias coupling the first top portion to the first bottom portion, and multiple ground vias coupling the second top portion to the second bottom portion.
4. The enclosure of claim 3 , wherein the ground vias are arranged in a ring, to form a ring of ground vias, around a perimeter of the volume.
5. The enclosure of claim 4 , wherein the capacitive sense vias are arranged in a ring concentrically within the ring of ground vias, and wherein the capacitive sense vias are close to and in alternating position with the ground vias.
6. The enclosure of claim 3 , wherein the ground vias and/or the capacitive sense vias are arranged around a perimeter of the volume such that drilling into the volume without contacting at least one of the first capacitive plate, the second capacitive plate, the ground vias, and the capacitive sense vias, is prevented.
7. The enclosure of claim 1 , further comprising:
a communications node not surrounded by the first capacitive plate or the second capacitive plate, the communications node configured to receive an electronic signal; and
a communications line electronically coupling the capacitive sensor and/or the circuitry to the communications node.
8. The enclosure of claim 7 , wherein the electronic signal can include one or more of power, control signals for the circuitry and/or the capacitive sensor, data for use in operation of the circuitry and/or the capacitive sensor, or programming for the capacitive sensor.
9. The enclosure of claim 1 , wherein the first capacitive plate either alone, or together with the platform, surrounds the volume without gaps, and wherein the second capacitive plate either alone, or together with the platform, surrounds the first capacitive plate without gaps.
10. The enclosure of claim 1 , wherein at least one of the first capacitive plate and the second capacitive plate is configured to shield the volume against electric and/or magnetic fields.
11. The enclosure of claim 1 , wherein the first and second capacitive plates are shaped as five-sided boxes, as N-sided boxes with N−1 closed sides, or as portions of a sphere.
12. The enclosure of claim 1 , wherein the capacitive sensor is configured to cause a specified portion of the circuitry to become inoperable if the capacitive sensor detects the capacitance between the first and second capacitive plates is changed, more than by a threshold amount of change, and other than by the charge source.
13. The enclosure of claim 1 , wherein the circuitry and the capacitive sensor are configured not to receive power from outside of the volume.
14. The enclosure of claim 1 , wherein the charge source is configured to be powered via an electrical coupling between the charge source and a power node outside the volume, the power node configured to receive power.
15. A method of protecting circuitry from tampering, the method comprising:
enclosing, within an inner shield, a volume which contains the circuitry, the inner shield including a charged inner capacitive plate coupled to a charge source within the volume, and capacitive sense vias coupling the inner capacitive plate to a capacitance sensor;
enclosing, within an outer shield, the volume and the inner shield, the outer shield including a grounded outer capacitive plate, and ground vias coupling the outer capacitive plate to a ground, the outer shield not touching the inner shield;
measuring a capacitance between the inner capacitive plate and the outer capacitive plate using a sensor located within the volume; and
operating the circuitry in dependence on the measuring.
16. The method of claim 15 , wherein the operating includes causing a specified portion of the circuitry to become inoperable if the capacitive sensor detects the capacitance between the first and second capacitive plates is changed other than by the charge source.
17. The method of claim 16 , wherein the causing a specified portion of the circuitry to become inoperable includes one or more of deleting specified data, making specified data unchangeable, or inducing a physically self-destructive event.
18. The method of claim 16 , wherein the capacitance being changed other than by the charge source is determined in dependence on a comparison between the capacitance and a threshold.
19. The method of claim 15 , wherein a polling frequency of a capacitance between the inner shield and the outer shield is random and/or pseudorandom.
20. The method of claim 15 , further comprising shielding the volume against electric and/or magnetic fields using the inner shield and the outer shield.
21. The method of claim 15 , further comprising measuring one or more of voltage, temperature, and humidity, and compensating in the measuring step for a measured voltage, temperature, and/or humidity.
22. The method of claim 15 , wherein the charge source is powered by a power source outside the volume.
23. A method of protecting circuitry from tampering, the method comprising:
enclosing, using an inner shield, a volume which contains the circuitry, the inner shield including a charged inner capacitive plate coupled to a charge source within the volume, and capacitive sense vias coupling the inner capacitive plate to a capacitance sensor;
enclosing, using an outer shield, a volume and the inner shield, the outer shield including a grounded outer capacitive plate, and ground vias coupling the outer capacitive plate to a ground, the outer shield not touching the inner shield;
measuring a capacitance between the inner capacitive plate and the outer capacitive plate using a sensor located within the volume; and
operating the circuitry in dependence on the measuring.
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US16/263,261 US10925154B2 (en) | 2019-01-31 | 2019-01-31 | Tamper detection |
PCT/US2020/015569 WO2020160082A1 (en) | 2019-01-31 | 2020-01-29 | Tamper detection |
CN202080021048.4A CN113574570B (en) | 2019-01-31 | 2020-01-29 | Apparatus and method for tamper detection |
US17/176,942 US11805596B2 (en) | 2019-01-31 | 2021-02-16 | Tamper detection |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US16/263,261 US10925154B2 (en) | 2019-01-31 | 2019-01-31 | Tamper detection |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US17/176,942 Continuation US11805596B2 (en) | 2019-01-31 | 2021-02-16 | Tamper detection |
Publications (2)
Publication Number | Publication Date |
---|---|
US20200253042A1 US20200253042A1 (en) | 2020-08-06 |
US10925154B2 true US10925154B2 (en) | 2021-02-16 |
Family
ID=71836918
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US16/263,261 Active 2039-04-21 US10925154B2 (en) | 2019-01-31 | 2019-01-31 | Tamper detection |
US17/176,942 Active 2039-02-24 US11805596B2 (en) | 2019-01-31 | 2021-02-16 | Tamper detection |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US17/176,942 Active 2039-02-24 US11805596B2 (en) | 2019-01-31 | 2021-02-16 | Tamper detection |
Country Status (3)
Country | Link |
---|---|
US (2) | US10925154B2 (en) |
CN (1) | CN113574570B (en) |
WO (1) | WO2020160082A1 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11805596B2 (en) * | 2019-01-31 | 2023-10-31 | Texas Instruments Incorporated | Tamper detection |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114057036B (en) * | 2021-11-12 | 2024-02-27 | 深圳市旭威科技发展有限公司 | Wire-rewinding box design and connection mode |
Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2174830A (en) | 1985-04-27 | 1986-11-12 | David Clark | Tamper-proof enclosures |
GB2256956A (en) | 1991-06-21 | 1992-12-23 | Gore & Ass | Security enclosures |
WO1999021142A1 (en) | 1997-10-17 | 1999-04-29 | W. L. Gore & Associates (Uk) Limited | Tamper respondent enclosure |
US6628124B1 (en) * | 1999-03-04 | 2003-09-30 | Riken | Electrocapacitive force measuring apparatus |
US7784366B2 (en) * | 2008-07-29 | 2010-08-31 | Motorola, Inc. | Single sided capacitive force sensor for electronic devices |
WO2012155057A2 (en) | 2011-05-12 | 2012-11-15 | The Trustees Of Dartmouth College | Planar probe and system for measuring dielectric properties of biological materials |
US8736283B2 (en) * | 2010-03-04 | 2014-05-27 | Franklin Sensors Inc. | Advanced obscured feature detector |
US20170332485A1 (en) * | 2016-05-13 | 2017-11-16 | International Business Machines Corporation | Tamper-proof electronic packages formed with stressed glass |
US9990087B2 (en) * | 2013-09-28 | 2018-06-05 | Apple Inc. | Compensation for nonlinear variation of gap capacitance with displacement |
US10107014B2 (en) * | 2015-08-30 | 2018-10-23 | Opticallock, Inc. | Security system with anti-tampering sensors and cybersecurity |
US10663613B2 (en) * | 2015-06-23 | 2020-05-26 | Franklin Sensors, Inc. | Apparatus and methods for detecting obscured features |
Family Cites Families (24)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3634844A (en) * | 1969-06-27 | 1972-01-11 | John G King | Tamperproof alarm construction |
GB2297540B (en) * | 1993-03-12 | 1997-01-29 | Gore & Ass | Tamper respondent enclosure |
FR2869939B1 (en) * | 2004-05-06 | 2006-06-23 | Axytrans Sa | SECURE SYSTEM FOR TRANSPORTING OR RETAINING VALUES SUCH AS BANKNOTES |
US7247791B2 (en) * | 2004-05-27 | 2007-07-24 | Pitney Bowes Inc. | Security barrier for electronic circuitry |
US7549064B2 (en) * | 2005-05-10 | 2009-06-16 | Hewlett-Packard Development Company, L.P. | Secure circuit assembly |
US7898413B2 (en) * | 2007-01-25 | 2011-03-01 | Verifone, Inc. | Anti-tamper protected enclosure |
US7880605B2 (en) * | 2008-07-08 | 2011-02-01 | Se-Kure Controls, Inc. | Security system for portable device with arming feature |
US20110304305A1 (en) * | 2010-06-15 | 2011-12-15 | Nokia Corporation | apparatus and method for a capacitive element in a structure |
US8847802B2 (en) * | 2011-10-06 | 2014-09-30 | Microchip Technology Incorporated | Microcontroller ADC with a variable sample and hold capacitor |
US10678951B2 (en) * | 2011-10-24 | 2020-06-09 | Maxim Integrated Products, Inc. | Tamper detection countermeasures to deter physical attack on a security ASIC |
US9711196B2 (en) * | 2012-09-10 | 2017-07-18 | Texas Instruments Incorporated | Configuration bit sequencing control of nonvolatile domain and array wakeup and backup |
WO2014068361A1 (en) * | 2012-10-29 | 2014-05-08 | Qatar Foundation | A tamper detection arrangement |
EP2929482B1 (en) * | 2012-12-07 | 2018-05-02 | Cryptera A/S | A security module for protecting circuit components from unauthorized access |
US9324222B2 (en) * | 2013-02-28 | 2016-04-26 | Honeywell International Inc. | Tamper resistant motion detector |
US10078764B2 (en) * | 2013-07-11 | 2018-09-18 | Cryptera A/S | Tamper responsive sensor |
US9342710B2 (en) * | 2013-11-21 | 2016-05-17 | Nxp B.V. | Electronic tamper detection |
US10175064B2 (en) * | 2015-09-25 | 2019-01-08 | International Business Machines Corporation | Circuit boards and electronic packages with embedded tamper-respondent sensor |
US9578764B1 (en) * | 2015-09-25 | 2017-02-21 | International Business Machines Corporation | Enclosure with inner tamper-respondent sensor(s) and physical security element(s) |
US10963594B2 (en) * | 2016-01-21 | 2021-03-30 | Micro Focus Llc | Detecting physical penetration of secure device |
US9904811B2 (en) * | 2016-04-27 | 2018-02-27 | International Business Machines Corporation | Tamper-proof electronic packages with two-phase dielectric fluid |
US10651135B2 (en) * | 2016-06-28 | 2020-05-12 | Marvell Asia Pte, Ltd. | Tamper detection for a chip package |
US9886119B1 (en) * | 2016-08-02 | 2018-02-06 | Microsoft Technology Licensing, Llc | Capacitive sensor |
US10925154B2 (en) * | 2019-01-31 | 2021-02-16 | Texas Instruments Incorporated | Tamper detection |
US11191155B1 (en) * | 2020-12-10 | 2021-11-30 | International Business Machines Corporation | Tamper-respondent assembly with structural material within sealed inner compartment |
-
2019
- 2019-01-31 US US16/263,261 patent/US10925154B2/en active Active
-
2020
- 2020-01-29 WO PCT/US2020/015569 patent/WO2020160082A1/en active Application Filing
- 2020-01-29 CN CN202080021048.4A patent/CN113574570B/en active Active
-
2021
- 2021-02-16 US US17/176,942 patent/US11805596B2/en active Active
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2174830A (en) | 1985-04-27 | 1986-11-12 | David Clark | Tamper-proof enclosures |
GB2256956A (en) | 1991-06-21 | 1992-12-23 | Gore & Ass | Security enclosures |
WO1999021142A1 (en) | 1997-10-17 | 1999-04-29 | W. L. Gore & Associates (Uk) Limited | Tamper respondent enclosure |
US6628124B1 (en) * | 1999-03-04 | 2003-09-30 | Riken | Electrocapacitive force measuring apparatus |
US7784366B2 (en) * | 2008-07-29 | 2010-08-31 | Motorola, Inc. | Single sided capacitive force sensor for electronic devices |
US8736283B2 (en) * | 2010-03-04 | 2014-05-27 | Franklin Sensors Inc. | Advanced obscured feature detector |
WO2012155057A2 (en) | 2011-05-12 | 2012-11-15 | The Trustees Of Dartmouth College | Planar probe and system for measuring dielectric properties of biological materials |
US9990087B2 (en) * | 2013-09-28 | 2018-06-05 | Apple Inc. | Compensation for nonlinear variation of gap capacitance with displacement |
US10663613B2 (en) * | 2015-06-23 | 2020-05-26 | Franklin Sensors, Inc. | Apparatus and methods for detecting obscured features |
US10107014B2 (en) * | 2015-08-30 | 2018-10-23 | Opticallock, Inc. | Security system with anti-tampering sensors and cybersecurity |
US20170332485A1 (en) * | 2016-05-13 | 2017-11-16 | International Business Machines Corporation | Tamper-proof electronic packages formed with stressed glass |
Non-Patent Citations (1)
Title |
---|
International Search Report for PCT/US2020/015569 dated May 28, 2020. |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11805596B2 (en) * | 2019-01-31 | 2023-10-31 | Texas Instruments Incorporated | Tamper detection |
Also Published As
Publication number | Publication date |
---|---|
US20200253042A1 (en) | 2020-08-06 |
WO2020160082A1 (en) | 2020-08-06 |
CN113574570A (en) | 2021-10-29 |
CN113574570B (en) | 2023-08-29 |
US11805596B2 (en) | 2023-10-31 |
US20210168933A1 (en) | 2021-06-03 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7549064B2 (en) | Secure circuit assembly | |
US11805596B2 (en) | Tamper detection | |
CA1297584C (en) | Security device for sensitive data | |
US7247791B2 (en) | Security barrier for electronic circuitry | |
CN101611382B (en) | Anti-tamper protected enclosure | |
US4691350A (en) | Security device for stored sensitive data | |
US5117457A (en) | Tamper resistant packaging for information protection in electronic circuitry | |
US20090212945A1 (en) | Intrusion detection systems for detecting intrusion conditions with respect to electronic component enclosures | |
US7843339B2 (en) | Secure point of sale device employing capacitive sensors | |
EP2661740B1 (en) | Secure pin entry device | |
CA1306034C (en) | Security enclosures | |
US20070018334A1 (en) | Security method for data protection | |
US20100327856A1 (en) | Security Device | |
US20140240137A1 (en) | Point of sale terminal having enhanced security | |
US8099783B2 (en) | Security method for data protection | |
WO2013162843A1 (en) | Tamper respondent covering | |
JPH0782459B2 (en) | Intrusion prevention device for electronic assembly | |
EP2330528B1 (en) | Secure circuit board assembly | |
US20110255253A1 (en) | Protective serpentine track for card payment terminal | |
US4785743A (en) | Protected room with an electrical interruptor and its application | |
EP0268882B1 (en) | Tamper resistant package for protecting electronic circuitry | |
JP2014525076A (en) | Intrusion detection technology | |
US7495554B2 (en) | Clamshell protective encasement | |
EP0495645B1 (en) | Data security device | |
EP3721173B1 (en) | Integrity monitor |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: TEXAS INSTRUMENTS INCORPORATED, TEXAS Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:LEEK, ALAN HENRY;HALL, JACE HUNTER;REEL/FRAME:048203/0456 Effective date: 20190130 |
|
FEPP | Fee payment procedure |
Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |